Re: Support for plain dm-crypt and detached LUKS header

[Maxim Fomin]

On Sat, Feb 11, 2017 at 5:29 PM, Andrei Borzenkov <address@hidden> wrote:
> 11.02.2017 17:11, Maxim Fomin пишет:
>>
>> By the way, why user should configure the module manually? My
>> understanding is that user should provide all necessary options to the
>> command (manually or via grub.cfg) which decrypts dm-crypt partition
>> just like in case of cryptsetup.
>>
>
> cryptsetup works with self-identifying containers which dm-crypt is not.
>

Definitely false. Have you ever worked with plain dm-crypt? Cryptsetup
 is utility to open and close
plain dm-crypt containers which are not self-identifying. User must
provide all parameters in order
to open container: password, hash, cipher, key size, data offset, IV offset.

I suspect there is misunderstanding here. What I am suggesting is to
have grub command which
works similar to cryptsetup utility. It may be the same cryptomount
command or a new one. For
example: grubcryptsetup (hd0,gptXXX) -s ... -h .... -c .... etc.

I see no technical grounds for such ideas 'manually configuration'
'special module', etc.